found out that /etc/.git is world readable on the warchall box.
We use git to track changes to the machine config.
Any warchall user password might be affected by that read. (No time to investigate)
If you re-use your warchall password somewhere else, f.e. on wechall.net, it is a good idea to change it.
Thanks go out to ogon
for letting us know!